Replacing OpenSSL in base -- does it work?

[Chris H]

Hi all,
I just fired off a fresh build on a new 12-CURRENT install. But forgot
to add WITHOUT_OPENSSL to src.conf(5), as I had intended to. :-(
Anyway, I'd like to remove OpenSSL from base. Any recommendations on the
best approach, and best alternatives?

Thanks!

--Chris

[Shawn Webb]

Post by Chris H
Hi all,
I just fired off a fresh build on a new 12-CURRENT install. But forgot
to add WITHOUT_OPENSSL to src.conf(5), as I had intended to. :-(
Anyway, I'd like to remove OpenSSL from base. Any recommendations on the
best approach, and best alternatives?

Both HardenedBSD and TrueOS use LibreSSL in base.

Thanks,

[Chris H]

Post by Shawn Webb

Post by Chris H
Hi all,
I just fired off a fresh build on a new 12-CURRENT install. But forgot
to add WITHOUT_OPENSSL to src.conf(5), as I had intended to. :-(
Anyway, I'd like to remove OpenSSL from base. Any recommendations on the
best approach, and best alternatives?

Both HardenedBSD and TrueOS use LibreSSL in base.

WOW. Thanks for the fast reply, Shawn!

I had already considered that might be a good direction. Nice to hear it
works!

Thanks again, Shawn!

--Chris

Post by Shawn Webb
Thanks,
--
Shawn Webb
Cofounder and Security Engineer
HardenedBSD
GPG Key ID: 0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE